Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

On Update User Endpoint, 'NULL' for the password field in the request body is being accepted which should not happen #681

Open
darthwithap opened this issue Jun 12, 2021 · 0 comments
Labels
Status: Approved approved for next version v2 changelog

Comments

@darthwithap
Copy link

🐞 bug report

Relevant scope

Backend Scope

Description

I was testing the endpoints on Postman and in the Update User POST request, in the Request Body, it sees like I can pass NULL for password which I think should not ideally happen. It essentially makes the user's password null and hence we can't change it thereafter because later the user can't login.
For the username parameter in the request body there is a check that says it cant be null and must be minimum 1 character and maximum 20 characters, similarly it should happen for password field as well.

Error

This should not happen and should sent an error response like the below
image

Correct

image

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Status: Approved approved for next version v2 changelog
Projects
None yet
Development

No branches or pull requests

2 participants